CobiT Consulting Services
Download Evergreen's presentation on 'ITIL® and CobiT, Overhead or Strategic Weapon'.
CobiT (Control Objectives for Information and Related Technologies) is a comprehensive model for enterprise control of the IT environment / IT Governance. It is generally accepted as de facto guidance for Sarbanes 404 compliance and has four domains:
- Planning and Organization
- Acquisition and Implementation
- Delivery and Support
- Monitoring
It also involves 32 different processes with over 300 detailed control objectives for processes. Evergreen's CobiT consulting practice strives to work with CobiT's strengths, that include
- A de facto standard
- A comprehensive, independent, evolving, large body of knowledge and educational support
- A common language and maturity model for IT process improvement
- A good fit with ITIL best practices
CobiT does have some weaknesses, including the fact that it is:
- Not fully prescriptive
- Very broad with built in 'traps' towards moving towards a 'grand design'
- Has no value measurement
- Often greeted with resistance to change
- Has unclear governance ownership
Cobit does, however, have important business value, including increased compliance, corporate risk reduction, good accountability and provides a useful tool for baselining control maturity.